Privacy Policy

Effective date: September 6, 2026 · Pravaahan Flow, a product of Pravaahan Tech

Pravaahan Flow is built local-first and private by default: your working data lives on your device, and reaches our servers only to give you sync, backup and the social features you opt into. This policy explains what we collect, why, and the choices you have. It applies to the Pravaahan Flow app, website and browser extension (the “Service”).

1. Data we collect

Account data — your email address, display name and password (stored as a salted hash; never in plain text). If you sign in with Google, we receive your name, email and avatar from Google.
Your productivity content — the areas, projects, tasks, routines, notes, focus sessions, reviews, earnings settings and related records you create. This is stored on your device first and synced to our servers while you are signed in, so your data follows you across devices.
Payment data — paid plans are processed by Razorpay. We receive the subscription status and transaction reference; we never see or store your card number.
Technical data — basic logs needed to run and secure the Service (IP address, device/browser type, timestamps, error reports).

We do not collect your contacts, location, or browsing history. The deep-focus browser extension acts entirely on your device to block distracting sites you configure; it does not report your browsing to us.

2. How we use data

To provide the Service: storing, syncing and displaying your content, running timers, reminders and reviews.
To operate optional social features — groups and leaderboards — using only what you choose to share there (e.g. your display name and standing).
To process subscriptions and prevent fraud and abuse.
To send service messages (security notices, important changes). Product emails, if any, always carry an unsubscribe.
To debug and improve reliability using aggregate, de-identified usage patterns.

We do not sell your personal data, and we do not use the content of your projects, tasks or notes for advertising or to train AI models.

3. Sharing

We share data only with:

Service providers who host and operate our infrastructure, bound by contract to use it only for us;
Razorpay, to process payments you initiate;
Google, when you choose Google sign-in;
Authorities, when the law genuinely requires it;
A successor entity, if Pravaahan Tech is acquired or reorganized — under this same policy.

4. Where your data lives

The primary copy of your productivity content is in your browser’s local storage (IndexedDB) on each device you use. Signed-in devices sync through our servers, which hold a copy so your devices converge. Server infrastructure may be located in India and/or other regions; wherever it runs, this policy applies.

5. Retention and deletion

Your content is kept for as long as your account exists.
Deleting an item in the app soft-deletes it and propagates that deletion across your devices.
Deleting your account removes your synced content from our active systems; residual copies in encrypted backups expire on the backup rotation schedule (up to 90 days).
Data on your own devices is under your control — clearing the browser’s site data removes the local copy.

6. Security

Traffic between your devices and our servers is encrypted in transit (TLS). Passwords are hashed, access to production systems is restricted, and payment card data never touches our servers. No system is perfectly secure — keep your password unique, and contact us immediately if you suspect unauthorized access to your account.

7. Your rights

Under India’s Digital Personal Data Protection Act, 2023 (and similar laws where you live), you may: access a summary of the personal data we hold about you; correct inaccurate data; withdraw consent; delete your account and data; and nominate a person to exercise these rights for you. Exercise any of these from the app’s settings or by emailing us. If you are unsatisfied with our response, you may complain to the Data Protection Board of India.

8. Children

The Service is not directed to children and may not be used by anyone under 18. We do not knowingly collect data from children; if you believe a child has an account, contact us and we will delete it.

9. Changes to this policy

When we change this policy materially we will notify you in the app or by email and update the effective date above. Continued use after the effective date means you accept the updated policy.

10. Contact & grievances

Grievance Officer, Pravaahan Tech — sampathkarupakula@pravaahan.com. We acknowledge grievances within 72 hours and aim to resolve them within 30 days.